Benchmarking a cluster's security configuration